CVE-2026-61673 | LabRedesCefetRJ WeGIA up to 3.8.6 DOM listar_despachos.php html_entity_decode texto cross site scripting

October 29, 2026 Yanac

A vulnerability categorized as problematic has been discovered in LabRedesCefetRJ WeGIA up to 3.8.6. The affected element is the function html_entity_decode of the file web/html/memorando/listar_despachos.php of the component DOM. Such manipulation of the argument texto leads to cross site scripting.

This vulnerability is documented as CVE-2026-61673. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More